Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856387e4-e5ae-315d-9de8-d0d7211acdb2.roa
File:                     856387e4-e5ae-315d-9de8-d0d7211acdb2.roa (raw, json)
Hash identifier:          SzqLqOhAhOEvoc8w8Bbh1IacsFLx8FcxwTgPTgA37/A=
Subject key identifier:   04:1D:AB:FF:B5:47:5C:C4:11:FB:21:2B:D6:82:21:89:1C:54:94:6A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E5BAF59140D29B40110753E80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856387e4-e5ae-315d-9de8-d0d7211acdb2.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     396567
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:59:14:0d:29:b4:01:10:75:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=bd273fd0-0391-47b6-82e6-28fa833e0218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:11:e5:ac:f4:29:be:54:f9:8c:46:f7:31:84:
                    48:6e:c3:24:1b:11:16:0f:c9:01:b1:98:c4:cc:b5:
                    de:28:c0:db:9f:f3:16:01:54:4d:8b:0a:c0:c8:c2:
                    98:9d:c3:86:be:bc:29:ae:69:df:28:36:eb:0f:61:
                    a6:aa:ac:f2:e1:02:e8:e3:2f:c3:f6:f9:58:2b:ad:
                    ec:96:50:a8:63:ab:42:f1:b2:6e:d7:a5:99:e1:bf:
                    40:bc:47:1f:36:55:65:0e:ba:2a:14:e5:18:f6:9c:
                    3d:5f:7f:21:76:96:26:61:94:f4:51:33:49:68:38:
                    37:b6:ce:e6:42:28:ce:10:60:54:6e:3a:bb:63:c7:
                    e3:5d:7c:52:42:ad:a0:6f:17:02:4f:03:01:3f:58:
                    5c:8f:d5:9e:a8:d1:e9:2f:40:0f:2c:5f:7b:e3:05:
                    6b:a9:d7:5e:6f:67:fe:0f:42:72:7a:30:4e:92:4c:
                    6a:26:0f:f0:54:d6:4d:17:cf:96:8f:d9:fc:fa:d1:
                    35:4f:c2:8c:15:85:5d:c6:d1:f8:99:ec:22:23:59:
                    8d:5c:ef:4f:eb:20:7c:9c:2f:de:13:e3:25:99:58:
                    61:c4:82:87:61:93:11:7a:2c:62:b0:28:33:c0:3a:
                    a8:a7:73:38:4c:f9:15:cd:67:b4:79:3d:b3:26:d5:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1D:AB:FF:B5:47:5C:C4:11:FB:21:2B:D6:82:21:89:1C:54:94:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856387e4-e5ae-315d-9de8-d0d7211acdb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e7:dc:76:c2:04:4a:57:af:8a:2c:0d:c3:96:ff:82:50:79:
         b5:75:be:e5:40:9b:5e:6f:9f:45:e4:67:cd:cc:99:05:74:54:
         fc:85:5b:67:22:58:b9:62:58:18:ad:05:ff:bc:98:b2:d6:63:
         aa:35:2a:f4:67:9f:d8:96:d0:69:d3:ab:5f:a4:23:d1:21:7d:
         8c:eb:e7:bf:1a:8f:fe:70:ab:c2:94:ab:1b:cc:9e:dd:f0:fa:
         2f:86:6f:9e:e6:5c:00:eb:6d:4e:f2:0b:81:59:e7:02:1b:ab:
         08:f7:77:08:0c:0a:51:ad:82:db:d3:0a:d2:a6:1f:ab:7d:5d:
         2f:d4:a4:93:81:b9:4c:ec:d8:27:96:45:71:f7:30:09:f6:44:
         80:ca:e5:3c:2e:98:82:a6:bf:46:c8:50:2d:09:8c:b0:aa:54:
         df:9d:cd:39:5d:e1:2c:2d:d2:7b:03:34:a9:1e:fb:e5:ba:d9:
         e5:d8:ef:b6:31:8a:5c:5d:d1:4e:8e:da:84:5f:c3:49:21:d2:
         e6:33:99:fb:d9:e5:61:6a:c0:62:76:30:2d:dd:1e:a3:a2:92:
         f4:56:bb:cb:54:41:ac:03:f7:3e:56:de:6a:62:37:36:6f:84:
         67:e3:8f:02:da:e0:9b:bc:80:53:a2:eb:62:04:f2:b0:d4:9e:
         f5:e7:b0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:49 2026 by rpki-client